Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1-SOS07WMvka3MgpFS2XX85-VObA.cer
File: 1-SOS07WMvka3MgpFS2XX85-VObA.cer (raw, json)
Hash identifier: QIdjnbA0sWsIP/WP8s6EkmBRCVAx6foTLhzMIAzYLdA=
Subject key identifier: F9:23:92:D3:B5:8C:BE:46:B7:32:0A:45:4B:65:D7:F3:9F:95:39:B0
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 6DCF236B78
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/30/1bc57f-1b5b-49a1-ad13-7aeedcaf0489/1/1-SOS07WMvka3MgpFS2XX85-VObA.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/30/1bc57f-1b5b-49a1-ad13-7aeedcaf0489/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Thu 06 Aug 2020 12:21:59 +0000
Certificate not after: Thu 01 Jul 2021 00:00:00 +0000
Subordinate resources: IP: 91.196.68.0/22
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 471626640248 (0x6dcf236b78)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Aug 6 12:21:59 2020 GMT
Not After : Jul 1 00:00:00 2021 GMT
Subject: CN=f92392d3b58cbe46b7320a454b65d7f39f9539b0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:59:57:f9:c3:ef:6f:f4:8c:e7:a1:72:88:6c:
5b:05:04:3f:54:a8:d1:51:11:10:26:d1:8e:a3:55:
1c:86:d9:91:41:96:60:68:ce:20:d9:2b:78:d4:07:
1a:d1:44:c9:61:3d:ff:37:33:a9:86:5a:9e:5d:81:
b9:7a:17:11:2f:9b:a6:01:f2:e0:88:c2:b8:59:14:
0f:51:f0:71:59:dd:b0:5a:94:93:d3:05:34:0d:c3:
63:05:89:41:40:e7:e9:dd:eb:c9:03:13:35:00:11:
e1:6e:f6:f4:d1:c9:c9:5d:74:e1:5d:6b:89:6e:05:
49:ba:e0:a2:aa:83:ea:68:ab:61:69:14:a1:d5:61:
07:60:8e:1b:f1:21:12:a0:cc:d3:c9:a4:6f:08:2e:
b9:ae:fa:0a:97:2b:a3:ff:be:f2:1e:1c:91:11:75:
b0:3c:fa:c0:be:4f:00:c7:c0:af:ae:fa:1a:94:29:
7a:72:8a:46:78:b4:fc:53:a7:a6:ab:d0:fc:2c:dc:
e0:aa:6d:c5:73:72:c4:ef:7a:34:17:a2:da:7a:86:
34:32:c4:62:c6:fe:3c:9c:c0:2b:e0:be:00:67:b4:
cf:e2:83:e0:ee:12:13:97:a4:72:67:a7:c7:0b:57:
18:f2:64:84:7c:7d:e0:e8:77:01:be:e6:73:07:49:
b0:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F9:23:92:D3:B5:8C:BE:46:B7:32:0A:45:4B:65:D7:F3:9F:95:39:B0
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/30/1bc57f-1b5b-49a1-ad13-7aeedcaf0489/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/30/1bc57f-1b5b-49a1-ad13-7aeedcaf0489/1/1-SOS07WMvka3MgpFS2XX85-VObA.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.196.68.0/22
Signature Algorithm: sha256WithRSAEncryption
81:6b:be:58:05:b7:9d:3b:93:3e:7f:a8:f3:a9:7f:df:f1:72:
bd:4f:d5:77:3a:75:1f:b9:9c:dc:79:fd:49:6b:19:b8:29:8e:
4c:15:bd:d0:0a:e4:a2:e3:1f:19:52:43:c7:ef:1a:64:77:45:
6a:19:52:cf:98:11:1f:42:42:15:d7:5b:02:37:a1:51:e9:b0:
93:c0:5c:50:0c:76:00:58:0f:6b:b2:17:2d:25:c8:98:10:84:
90:58:2f:cb:f2:88:2d:06:1f:17:9d:e0:f4:9c:c9:ce:a4:fe:
e3:1b:e7:06:28:be:aa:e9:15:26:c4:1b:a6:c1:d9:f3:b5:32:
6c:61:90:97:d5:fc:e7:fe:fb:e3:96:17:01:96:5d:61:c0:13:
15:6e:e8:c4:0d:b0:3a:7f:dc:ad:ba:ff:ee:8b:99:2c:71:16:
fa:22:fe:b8:cd:67:9b:31:7c:40:e0:47:37:99:19:78:9d:6a:
2e:12:1b:29:02:48:60:69:76:06:a9:42:0c:87:c8:84:f2:10:
ef:16:19:f4:18:e6:b0:d4:ee:8a:f4:b8:e1:f8:60:26:8c:5e:
6c:b1:7f:5b:d1:6a:f1:f2:c9:88:09:11:14:72:c9:54:78:4c:
a3:73:7f:07:dc:a8:2b:19:b5:52:dc:aa:7a:eb:dd:b5:06:45:
2a:bb:61:0e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:44:07 2023 by rpki-client on console-fra.rpki-client.org